Which of the following BEST helps to determine appropriate access privileges for an application containing customer personal data?

The correct answer is D. Access control lists. Access control lists (ACLs) directly specify which users, roles, or systems are permitted to access specific resources and what operations they may perform. They are the definitive technical mechanism for defining and enforcing access privileges at a granular level within an appl

Privacy Architecture

Question

Options

AData catalog
BRACI charts
CData classification
DAccess control lists

How the community answered

(54 responses)

A
2% (1)
B
2% (1)
C
4% (2)
D
93% (50)

Explanation

Access control lists (ACLs) directly specify which users, roles, or systems are permitted to access specific resources and what operations they may perform. They are the definitive technical mechanism for defining and enforcing access privileges at a granular level within an application. A data catalog (A) inventories data assets and their attributes but does not assign access rights. RACI charts (B) clarify accountability and responsibility across roles but do not define system-level access permissions. Data classification (C) categorizes data by sensitivity and informs access policy decisions, but it is ACLs that translate those decisions into enforceable access privileges within the application.

Topics

#Access Control#Data Protection#Data Classification#Application Security

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice